Well... you can use simple file sharing and share the windows folder, or just the /etc/ (?) folder.
The host file is for local use, and practically for me it's useless, because it doesn't work for me
(don't know why...). But anyway, write a host-file modifying malware remotely and have fun
If it's the same LAN in an office, PC's probably won't be uber secure. In that case you can exploit such human error and use a netcat backdoor, which is completely legit - if Windows firewall is in use, you might have to open the ports in there for it to work...